Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/f71dc1-3ca9-457f-b86f-d06e7c692d8b/1/go4ax452tofdVgXy-4H91ar-t0E.mft
File:                     go4ax452tofdVgXy-4H91ar-t0E.mft (raw, json)
Hash identifier:          NLnZyXEQuRMvJElJ0H6+MRBAjzCtK9zZwGN6f0gIa54=
Subject key identifier:   83:D3:F5:2A:90:87:34:C9:16:0E:FF:0B:3D:79:03:5C:B7:3C:C8:59
Authority key identifier: 82:8E:1A:C7:8E:76:B6:87:DD:56:05:F2:FB:81:FD:D5:AA:FE:B7:41
Certificate issuer:       /CN=828e1ac78e76b687dd5605f2fb81fdd5aafeb741
Certificate serial:       019677FAF79F7D16F114D4C73A5352D0DA59
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/go4ax452tofdVgXy-4H91ar-t0E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/f71dc1-3ca9-457f-b86f-d06e7c692d8b/1/go4ax452tofdVgXy-4H91ar-t0E.mft
Manifest number:          04FC
Signing time:             Sun 27 Apr 2025 16:00:58 +0000
Manifest this update:     Sun 27 Apr 2025 16:00:58 +0000
Manifest next update:     Mon 28 Apr 2025 16:00:58 +0000
Files and hashes:         1: go4ax452tofdVgXy-4H91ar-t0E.crl (hash: sPNlGv4ALuE2sdKt6gRiEbWqVOU5MVIW/iIBzf9pACo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f8/f71dc1-3ca9-457f-b86f-d06e7c692d8b/1/go4ax452tofdVgXy-4H91ar-t0E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f8/f71dc1-3ca9-457f-b86f-d06e7c692d8b/1/go4ax452tofdVgXy-4H91ar-t0E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/go4ax452tofdVgXy-4H91ar-t0E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 16:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:77:fa:f7:9f:7d:16:f1:14:d4:c7:3a:53:52:d0:da:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=828e1ac78e76b687dd5605f2fb81fdd5aafeb741
        Validity
            Not Before: Apr 27 16:00:58 2025 GMT
            Not After : Apr 28 16:00:58 2025 GMT
        Subject: CN=83d3f52a908734c9160eff0b3d79035cb73cc859
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:4b:59:89:34:13:43:17:9f:74:ac:d2:96:24:
                    30:3f:05:72:04:f8:57:96:8c:50:25:18:44:ee:70:
                    96:e0:a8:88:f2:27:57:2f:16:a3:c8:18:9d:e7:a7:
                    46:fe:a8:61:d3:10:ee:e4:fd:fc:2d:f4:84:12:6d:
                    2e:78:11:a9:9e:77:3c:1a:26:6c:a2:5c:c9:3c:a2:
                    5f:05:94:ea:2f:73:6e:02:bc:87:ab:3b:1b:ef:7c:
                    37:df:73:a3:b6:2b:ad:b7:93:75:ae:a0:f9:94:0d:
                    c6:e6:3e:19:28:58:51:3a:a9:ef:42:4f:31:1c:08:
                    8a:b5:b8:bf:c2:a9:71:cf:22:91:52:89:a3:de:d3:
                    cb:6a:64:ca:ba:66:2e:39:c4:be:24:2c:17:4c:6d:
                    e4:32:c3:93:22:df:37:f2:38:36:71:0c:07:d6:ea:
                    a7:8e:1e:1b:18:34:07:d5:39:9a:6e:24:d5:37:46:
                    2c:ea:a1:25:aa:a9:e7:34:37:38:e2:1b:50:cf:ea:
                    ef:bf:65:55:e1:83:8f:09:61:6e:6a:fa:50:ee:a1:
                    b2:4b:78:32:d5:5a:55:6b:c2:f1:ba:0e:83:7e:a7:
                    b5:f8:6d:5e:66:02:15:e5:fc:48:da:70:ec:b5:e3:
                    ca:ba:34:30:f2:25:13:79:4a:a5:09:ac:00:bd:ad:
                    53:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:D3:F5:2A:90:87:34:C9:16:0E:FF:0B:3D:79:03:5C:B7:3C:C8:59
            X509v3 Authority Key Identifier:
                keyid:82:8E:1A:C7:8E:76:B6:87:DD:56:05:F2:FB:81:FD:D5:AA:FE:B7:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/go4ax452tofdVgXy-4H91ar-t0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/f71dc1-3ca9-457f-b86f-d06e7c692d8b/1/go4ax452tofdVgXy-4H91ar-t0E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/f71dc1-3ca9-457f-b86f-d06e7c692d8b/1/go4ax452tofdVgXy-4H91ar-t0E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:0c:e4:52:1c:5f:5b:5b:75:f2:7a:b8:cb:a8:f0:f9:7f:71:
         6e:a9:7a:44:1a:9c:cd:1b:67:4e:5f:2e:d2:fe:5e:3e:60:4e:
         f1:84:9d:f4:86:ba:55:15:3f:cb:04:70:8d:d2:63:76:b4:ce:
         32:99:4a:d7:94:bd:24:92:60:54:f2:d0:07:52:e8:25:07:d2:
         50:ec:7f:da:a5:3a:0c:e2:2b:44:39:a7:b7:81:02:57:4b:b8:
         15:9c:61:c9:73:98:d5:cb:db:9e:b0:1d:86:6c:6a:32:59:a2:
         88:90:df:af:87:59:04:c0:d0:4b:c6:ae:d2:f7:43:e6:3e:1b:
         dc:d7:a9:2c:d0:bc:fd:af:e6:93:54:24:1c:32:fa:1b:39:42:
         26:0c:f5:6a:5c:f6:96:11:f6:2b:ab:7a:68:67:11:18:25:ce:
         32:de:70:91:15:d0:e5:ce:d7:d8:51:ed:a8:d8:38:49:46:e9:
         ea:72:d9:50:6b:67:d3:b5:54:2e:51:83:3b:95:e2:ca:f2:28:
         be:68:51:af:a3:de:6d:1b:f6:c9:ab:d9:26:a4:b3:b1:29:e7:
         40:e6:4b:84:e4:df:cd:fe:f8:d3:70:4c:ae:45:6a:07:a5:ae:
         92:1d:f0:b9:f5:22:66:b4:d9:e6:41:03:c5:05:af:f5:8c:2b:
         8a:5d:48:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 02:13:47 2025 by rpki-client